[ Phaseshifter @ 03.04.2010. 22:37 ] @
Evo ovako imam mrezu od 6 racunara koja dolazi na Mikrotik router board 750 koji je prikljucen na kablovski net. Da ne bi pisao previse kako mreza izgleda evo seme. Kao sto se vidi po dve masine imaju zajednicki kabal tako da kablovi od svih delova mreze ulaze direktno na MTRB 750 koji ima pet portova.MT dobija neku javnu dinamicku adresu od provajdera koji je prikljucen na eth1 dok su eth 2-4 stavljeni u bridge na koji je pusten dhcp server i dodeljuje adrese 192.168.0.10-20 Klijenti koji se kace na MT nemaju fiksno limitirane protoke vec samo zagarantovane u slucaju guzve tako da se link iskoristi sto je bolje moguce. U firewallu su sledeca pravila: ip firewall filter print Code: 0 ;;; ICMP chain=input action=accept protocol=icmp 1 ;;; Established chain=input action=accept connection-state=established in-interface=eth1 2 ;;; Related chain=input action=accept connection-state=related in-interface=eth1 3 ;;; Zastita od spolja chain=input action=drop in-interface=eth1 ip firewall nat print Code: 0 ;;; nat i maskarada chain=srcnat action=masquerade out-interface=eth1 ip firewall mangle print Code: 0 chain=forward action=mark-packet new-packet-mark=icmp passthrough=no protocol=icmp 1 chain=forward action=mark-packet new-packet-mark=ssl passthrough=no protocol=tcp dst-port=443 2 chain=forward action=mark-packet new-packet-mark=p2p passthrough=no p2p=all-p2p 3 chain=forward action=mark-packet new-packet-mark=udp-100 passthrough=no protocol=udp packet-size=0-100 4 chain=forward action=mark-packet new-packet-mark=udp-500 passthrough=no protocol=udp packet-size=100-500 5 chain=forward action=mark-packet new-packet-mark=udp-other passthrough=no protocol=udp 6 chain=forward action=mark-packet new-packet-mark=msn-messenger passthrough=no protocol=tcp dst-port=1863 7 chain=forward action=mark-packet new-packet-mark=pop3 passthrough=no protocol=tcp dst-port=110 8 chain=forward action=mark-packet new-packet-mark=smtp passthrough=no protocol=tcp dst-port=25 9 chain=forward action=mark-packet new-packet-mark=imap passthrough=no protocol=tcp dst-port=143 10 chain=forward action=mark-packet new-packet-mark=gre passthrough=no protocol=gre 11 chain=forward action=mark-packet new-packet-mark=ipsec-esp passthrough=no protocol=ipsec-esp 12 chain=forward action=mark-packet new-packet-mark=ipsec-ah passthrough=no protocol=ipsec-ah 13 chain=forward action=mark-packet new-packet-mark=ipencap passthrough=no protocol=ipencap 14 chain=forward action=mark-packet new-packet-mark=ipip passthrough=no protocol=ipip 15 chain=forward action=mark-packet new-packet-mark=Youtube passthrough=no src-address-list=Youtube 16 chain=forward action=mark-packet new-packet-mark=http passthrough=no protocol=tcp dst-port=80 Podesavanja za limit i QoS queue simple print Code: 0 name="Ivke" target-addresses=192.168.0.11/32 dst-address=0.0.0.0/0 interface=all parent=none direction=both priority=8 queue=default/default limit-at=128k/3M max-limit=700k/16M burst-limit=0/0 burst-threshold=128k/2M burst-time=3s/3s total-queue=default-small 1 name="Misko" target-addresses=192.168.0.12/32 dst-address=0.0.0.0/0 interface=all parent=none direction=both priority=8 queue=default/default limit-at=128k/3M max-limit=700k/16M burst-limit=0/0 burst-threshold=128k/2M burst-time=1s/1s total-queue=default 2 name="Milos" target-addresses=192.168.0.10/32 dst-address=0.0.0.0/0 interface=all parent=none direction=both priority=8 queue=default/default limit-at=128k/3M max-limit=700k/16M burst-limit=0/0 burst-threshold=128k/2M burst-time=3s/3s total-queue=default-small 3 name="Rile" target-addresses=192.168.0.13/32 dst-address=0.0.0.0/0 interface=all parent=none direction=both priority=8 queue=default/default limit-at=128k/3M max-limit=700k/16M burst-limit=0/0 burst-threshold=128k/2M burst-time=3s/3s total-queue=default-small 4 name="Sale" target-addresses=192.168.0.15/32 dst-address=0.0.0.0/0 interface=all parent=none direction=both priority=8 queue=default/default limit-at=128k/3M max-limit=700k/16M burst-limit=0/0 burst-threshold=128k/2M burst-time=3s/3s total-queue=default-small 5 name="Pera" target-addresses=192.168.0.14/32 dst-address=0.0.0.0/0 interface=all parent=none direction=both priority=8 queue=default/default limit-at=128k/3M max-limit=700k/10M burst-limit=0/0 burst-threshold=128k/2M burst-time=3s/3s total-queue=default-small Queue three  Ono sto mene interesuje je sledece: -Da li je ovako podesen MT ok resenje za ovakav tip mreze? -Da li da se otarasim bridge-a pa da na svaki interface pustim zaseban DHCP server sa zajednickim adress poolom ili da sve prebacim na staticke adrese i da rucno kucam rute sobzirom da vise od ovih 6 masina nece dolaziti u mrezu? -QOS mi je jako bitan ovde ali cini mi se da tu postoji neki problem -Kako da izveem da mi simple queues limitiraju samo internet saobracaj dok lokalni da ostaje full 100Mbit/a. -U principu interesuje me sve sto bi moglo da poboljsa podesavanje. Pozdrav |